Hi,

Le mercredi 23 décembre 2009 à 16:27 +0100, Johan Walles a écrit :
> Hi Julien!
> 
> The reason I added them to USER_FILEPROP_FILES_DIRS was the
> instructions for the RTKT_FILE_WHITELIST:
> "
> # NOTE: It is recommended that if you whitelist any files, then you
> include
> # those files in the file properties check. See the
> USER_FILEPROP_FILES_DIRS
> # configuration option.
> #
> #RTKT_DIR_WHITELIST=""
> #RTKT_FILE_WHITELIST=""
> RTKT_FILE_WHITELIST="/etc/init.d/.depend.boot /etc/init.d/checkroot.sh
> /etc/init.d/hdparm /etc/init.d/bootlogd"
> "
> 
> If those instructions are wrong, they should go as well.
> 

You are right.
Actually, here is what you should do:

# whitelist the files
RTKT_FILE_WHITELIST="/etc/init.d/hdparm /etc/init.d/bootlogd 
/etc/init.d/checkroot.sh /etc/init.d/.depend.boot"

# add them to the local list of tracked files and directories
USER_FILEPROP_FILES_DIRS="/etc/init.d/hdparm /etc/init.d/bootlogd 
/etc/init.d/checkroot.sh /etc/init.d/.depend.boot"

# authorize these commands to be scripts (vs. exectuable binaries)
SCRIPTWHITELIST="/etc/init.d/hdparm"
SCRIPTWHITELIST="/etc/init.d/bootlogd" 
SCRIPTWHITELIST="/etc/init.d/checkroot.sh"

Cheers,
Julien






--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to